Senior Analyst, Cyber Risk Quantification and GRC

Forrester Research, Inc. (US); Cambridge (MA); On-site; USD 119,000 - 193,000; Full time

Job summary

Forrester Research, Inc. is seeking a Senior Analyst based in Cambridge, Massachusetts. This role involves delivering strategic advice for risk management leaders and conducting impactful research. The ideal candidate will have 5-7 years of experience in risk management with expertise in cyber risk quantification.

The position offers a competitive salary range of $119,000 – $193,000, complemented by a performance-based bonus. Forrester promotes an inclusive workplace, encouraging diverse applicants.

Qualifications

• 5-7 years of experience as a research analyst or product manager focused on risk management.
• Ability to travel up to 20% of the time.
• Strong expertise in cyber risk quantification and compliance management.

Responsibilities

• Conduct primary research into risk management capabilities.
• Develop a comprehensive research portfolio on risk management.
• Consult with clients to apply research to their business.

Skills

Understanding of risk management

Cyber risk quantification

Compliance management

Research and writing skills

Job description

About This Role

Forrester is currently looking for a Senior Analyst to conduct research and deliver strategic advice for risk management leaders and their teams.

Ideal Candidate Profile

• A strong understanding of risk management roles, responsibilities, and the key security and risk trends and their business and technology implications.
• Deep knowledge and experience with risk management practices, methods, and cyber risk quantification.
• Experience in developing, maintaining, and communicating risk management artifacts such as risk standards, procedures, appetite, registry, and business strategy.
• Strong expertise in compliance management, internal or external audit, and GRC platforms is highly desired.

Key Responsibilities

• Develop a deep understanding of what Forrester clients require to be successful as risk management leaders and professionals, focusing on how they help organizations build resilient, opportunity‑seeking businesses.
• Conduct primary research into risk management capabilities, practices, touchpoints, and artifacts to support C‑suite executives, business leaders, and relevant committees.
• Help define the future of risk management, describing how risk leaders and professionals can collaborate with other key business functions to support organizational success.
• Work with different focus areas across Forrester research teams to develop a comprehensive research portfolio on risk management, incorporating expertise from across Forrester for a “big‑picture” view.
• Partner with other Forrester analysts on broader risk topics, including risk quantification, third‑party risk, systemic risk, compliance, and cyber risk.
• Research, write, and create approximately six to eight research projects per year, including written reports, tools, webinars, videos, podcasts, infographics, and other intellectual property.
• Build visibility for research and contribute to Forrester client communities.
• Consult with clients to apply research in the context of their business environment and help solve their problems through inquiry, guidance, and advisory engagements.
• Establish an industry presence as an influential speaker and thinker; build relationships with journalists who cover the sector; and participate in vendor briefings and field press inquiries as needed.

Qualifications

• Five to seven years of experience as a research analyst, consultant, or practitioner focused on risk management, with a focus on cyber risk quantification, or an equal amount of time as product manager for vendors that serve the market.
• Deep intellectual curiosity about the effect of technology on the business landscape, solid business instincts, and a practical understanding of what drives companies.
• Creative view of markets, technologies, and attitudes combined with a fascination with the future.
• Superior listening, critical thinking, and writing skills, as well as compelling presentation skills.
• The ability to take complex, disparate ideas and distill them into simple, provocative concepts, and to take a stand on vendors and outcomes.
• Ability to travel up to 20% of the time.

Compensation

Base salary range: $119,000 – $193,000 (U.S. exclusions: NewYork City – $136,000 – $222,000; Georgia – $106,000 – $174,000). Bonus target at Washington State: 10% of base salary (subject to performance and eligibility).

Application Deadline

July31,2026

Legal and Equal Opportunity Statements

FLSA Status: Exempt. Forrester Research, Inc. is an Equal Employment Opportunity Employer. As a federal contractor, Forrester encourages veterans and individuals with disabilities to apply for employment. If you would like to discuss a reasonable accommodation, please reach out to [e-mail].